ethusdt[.]us

This domain, ethusdt.us, poses a significant risk as a brand impersonation site targeting users of a major cryptocurrency exchange platform. The site is designed to closely resemble the legitimate exchange's login interface, potentially tricking visitors into entering sensitive credentials such as usernames, passwords, and two-factor authentication codes. Once obtained, these credentials could be used to gain unauthorized access to user accounts, leading to theft of digital assets or personal information. The high-risk classification stems from its active impersonation tactics and confirmed presence on multiple security blocklists. Analysis indicates that ethusdt.us was registered on August 02, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with domains involved in phishing campaigns. The domain resolves to the IP address 104.21.44.170, which is part of a network range commonly used for content delivery and hosting, but also observed in malicious infrastructure. At the time of assessment, the domain was flagged by 14 out of 95 security vendors on VirusTotal, a clear indicator of its malicious nature. Additionally, it appears on three independent security blocklists, and its SSL certificate, issued by Google Trust Services, does not mitigate the risk, as fraudulent sites often use valid certificates to appear legitimate. Users who have visited ethusdt.us or entered any information on the site should take immediate action to secure their accounts. First, disconnect any connected devices or sessions from the legitimate exchange platform and revoke any active API keys or third-party app permissions. Change passwords for the exchange account and any other platforms where the same credentials may have been reused. Enable multi-factor authentication if not already active, using an authenticator app rather than SMS-based methods. Monitor the account for unauthorized transactions and report any suspicious activity to the legitimate platform's support team. If cryptocurrency transactions were initiated, note that recovery of stolen assets is often impossible, but reporting to relevant authorities or blockchain analysis firms may assist in tracking the funds.